Blackthorn2

In-Depth Examination

Data from GPS devices differs from other mobile devices in the fact that it can be visualized and plotted on a map. GPS data provides the most insight when examined in this native form. Blackthorn seamlessly visualizes the data acquired from a device by plotting it on street level maps and allowing the examiner to include those map views in reports.

 

 

Blackthorn2 Device Examination

Blackthorn2 gives control back to Mobile Device Examiners by allowing them to bookmark data relevant to a case and create easy to understand reports that include street-level map views.

Key Examination Features Include:

1. Examine device file structures, file access and creation times. 
2. Examine multiple devices as part of one case.
3. Web based mapping through Microsoft’s Virtual Earth or Google Maps and embedded mapping via Microsoft’s MapPoint for field operations without connectivity
4. Create Live Reports by tagging or bookmarking data, adding map views, and customizing the report layout on the fly.
5. Export Reports in HTML and PDF format.
6. Export data in XML, GDB, and KML formats which are accepted by applications such as Google Earth, FalconView, ArcGIS, and Raptor.
   • Search free or structured text and limit results by date range as well as a specific geographic area.

Blackthorn2’s user interface is intuitive and simple to use but still provides an in-depth, forensically sound, platform with many of the traditional capabilities required by examiners.